build(deps): Bump conventional-changelog-conventionalcommits from 9.3.1 to 10.4.0 in the semantic-release group across 1 directory - #2
Merged
dborgards merged 1 commit intoSep 9, 2026
Conversation
Owner
|
@dependabot rebase |
dependabot
Bot
changed the title
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/semantic-release-e28a0b5442
branch
from
September 9, 2026 08:16
5a87b36 to
a379921
Compare
Owner
|
validate-release-config fails deterministically on this bump: |
dborgards
added a commit
that referenced
this pull request
Sep 9, 2026
require.resolve() can't load an ESM-only package (no "require" export condition) even when semantic-release's own plugins load it fine -- @semantic-release/commit-analyzer and release-notes-generator resolve presets through import-from-esm, which understands ESM-only packages. conventional-changelog-conventionalcommits went ESM-only in 10.x, so this guard was false-flagging a preset bump that actually works, blocking PR #2. Verified locally: passes against both the pinned 9.3.1 and against 10.4.0 installed on top of it.
Owner
|
Root cause found and fixed on main: eng/verify-release-config.mjs used require.resolve(), which can't load an ESM-only package (no |
Owner
|
@dependabot rebase |
Bumps the semantic-release group with 1 update in the / directory: [conventional-changelog-conventionalcommits](https://github.com/conventional-changelog/conventional-changelog/tree/HEAD/packages/conventional-changelog-conventionalcommits). Updates `conventional-changelog-conventionalcommits` from 9.3.1 to 10.4.0 - [Release notes](https://github.com/conventional-changelog/conventional-changelog/releases) - [Changelog](https://github.com/conventional-changelog/conventional-changelog/blob/master/packages/conventional-changelog-conventionalcommits/CHANGELOG.md) - [Commits](https://github.com/conventional-changelog/conventional-changelog/commits/conventional-changelog-conventionalcommits-v10.4.0/packages/conventional-changelog-conventionalcommits) --- updated-dependencies: - dependency-name: conventional-changelog-conventionalcommits dependency-version: 10.4.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: semantic-release ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/semantic-release-e28a0b5442
branch
from
September 9, 2026 09:28
a379921 to
94f42bb
Compare
dborgards
deleted the
dependabot/npm_and_yarn/semantic-release-e28a0b5442
branch
September 9, 2026 09:32
dborgards
added a commit
that referenced
this pull request
Sep 9, 2026
10.4.0 (merged via the routine dependency-bump PR #2) requires conventional-changelog-writer@9+, but @semantic-release/commit-analyzer, release-notes-generator and changelog (all pinned to older majors here) resolve conventional-changelog-writer@^8.0.0 -- so npm installs 8.4.0. The mismatch doesn't surface at plugin/preset resolution time (which is all eng/verify-release-config.mjs checks, and all a PR build can check without push-rights), only when generateNotes actually renders a changelog template against a real commit history -- which only happens on a genuine release attempt on main. That's exactly what just failed after merging PR #15 (a feat: commit, the first release-triggering commit since #2 landed): "Missing helper: conventional-changelog-writer requires @9 or newer" (Handlebars helper missing from the older writer). No release side effects had happened yet (generateNotes runs before prepare/publish/tag) -- the run failed clean, nothing to unwind. Reverting to the last known-good 9.3.1 is the safe immediate fix. Re-attempting the writer@9+ upgrade later needs @semantic-release/ commit-analyzer, release-notes-generator and changelog bumped together with it, and should be verified with a real `GITHUB_TOKEN=$(gh auth token) npx semantic-release --dry-run --no-ci` locally (not just eng/verify-release-config.mjs, which only checks resolvability, not template rendering) -- that's exactly what confirmed this fix: generateNotes now completes and prints the real release notes.
dborgards
pushed a commit
that referenced
this pull request
Sep 9, 2026
## [1.1.0](v1.0.0...v1.1.0) (2026-09-09) ### Features * **rawcan:** add callback-style Subscribe(onNext, predicate) convenience API ([f3bb3e8](f3bb3e8)) ### Bug Fixes * **ci:** resolve release-config presets via import.meta.resolve ([e30423d](e30423d)) * **ci:** use a bypass-eligible PAT for the release push ([03e0cd9](03e0cd9)) * **rawcan:** skip pump join when disposing callback Subscribe from onNext ([be23113](be23113)) * **rawcan:** stop callback pump after self-dispose ([fa54874](fa54874)) * **release:** revert conventional-changelog-conventionalcommits to 9.3.1 ([1910026](1910026)), closes [#2](#2) [#15](#15) [#2](#2) ### Build & Dependencies * **deps:** Bump conventional-changelog-conventionalcommits ([#2](#2)) ([41af4e6](41af4e6)) * **deps:** Bump coverlet.collector and 2 others ([#8](#8)) ([b05ae9c](b05ae9c)) * **deps:** Bump Microsoft.Bcl.AsyncInterfaces from 10.0.11 to 10.0.12 ([#9](#9)) ([67aee2c](67aee2c)) * **deps:** Bump System.Memory from 4.5.4 to 4.6.3 ([#10](#10)) ([c15225a](c15225a)) * **deps:** Bump System.Threading.Channels from 10.0.11 to 10.0.12 ([#11](#11)) ([50db23c](50db23c)) * move to .NET 10 LTS ahead of net8.0 EOL ([cad2962](cad2962))
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the semantic-release group with 1 update in the / directory: conventional-changelog-conventionalcommits.
Updates
conventional-changelog-conventionalcommitsfrom 9.3.1 to 10.4.0Release notes
Sourced from conventional-changelog-conventionalcommits's releases.
Changelog
Sourced from conventional-changelog-conventionalcommits's changelog.
... (truncated)
Commits
340ad83chore(release): monorepo release (#1540)341e3f0feat(conventional-changelog-angular,conventional-changelog-conventionalcommit...cbd52fbchore(release): monorepo release (#1530)612d368fix(conventional-changelog,conventional-changelog-writer,conventional-changel...7be33d4feat(conventional-changelog-angular,conventional-changelog-conventionalcommit...a8ef1edfeat(conventional-changelog-angular,conventional-changelog-conventionalcommit...18332e8test: remove duplicate repository fields from fixtures (#1527)b82a462chore(release): monorepo release (#1500)04796e2fix: point package homepages and docs to documentation website69b0d36chore(release): monorepo release (#1492)